programs: jq: sandbox

This commit is contained in:
Colin 2024-02-25 01:56:30 +00:00
parent 73b2594d9b
commit f714bd8281

View File

@ -587,9 +587,9 @@ in
iw.sandbox.net = "all"; iw.sandbox.net = "all";
iw.sandbox.capabilities = [ "net_admin" ]; iw.sandbox.capabilities = [ "net_admin" ];
# jq.sandbox.method = "bwrap"; jq.sandbox.method = "bwrap";
# jq.sandbox.wrapperType = "wrappedDerivation"; jq.sandbox.wrapperType = "wrappedDerivation";
# jq.sandbox.autodetectCliPaths = true; # liable to over-detect, but how else to sandbox? jq.sandbox.autodetectCliPaths = "existingFile";
killall.sandbox.method = "landlock"; killall.sandbox.method = "landlock";
killall.sandbox.wrapperType = "wrappedDerivation"; killall.sandbox.wrapperType = "wrappedDerivation";